appc/spec: make version a first-class required field

We should leave off the semver enforcement. Think "latest".